Spring Boot 3.0.7 available now, fixing CVE-2023-20883

Releases | Andy Wilkinson | May 18, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 3.0.7 has been released and is now available from Maven Central.

This release includes 54 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Boot 2.7.12 available now, fixing CVE-2023-20883

Releases | Andy Wilkinson | May 18, 2023 | ...

On behalf of the team and everyone who has contributed, I'm happy to announce that Spring Boot 2.7.12 has been released and is now available from Maven Central.

This release includes 28 bug fixes, documentation improvements, and dependency upgrades. Thanks to all those who have contributed with issue reports and pull requests.

This release includes a fix for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Boot 2.5.15 and 2.6.15 available now, fixing CVE-2023-20883

Releases | Phil Webb | May 18, 2023 | ...

I happy to announce that Spring Boot 2.5.15 and 2.6.15 have been released and are now available from Maven Central.

This release follows a request from a customer with commercial support that was looking to have the ability to upgrade to later versions of SnakeYAML.

This release also includes fixes for CVE-2023-20883: Spring Boot Welcome Page DoS Vulnerability as well as CVE-2023-20873: Security Bypass With Wildcard Pattern Matching on Cloud Foundry.

If you're interested in purchasing commercial support for Spring, please see https://spring.io/support.

How can you help?

If you're interested in helping out, check out the "ideal for contribution" tag in the issue repository. If you have general questions, please ask on stackoverflow.com using the spring-boot tag or chat with the community on Gitter

Spring Integration 6.1 goes GA

Releases | Artem Bilan | May 18, 2023 | ...

Dear Spring community,

Hope you enjoy Spring IO anniversary in Barcelona these days. I'm not there this years for many reasons. Either way, it is my pleasure to announce that Spring Integration 6.1.0 is generally available now from Maven Central.

In addition, bug fixes version 5.5.18 has been released.

The Spring Integration 6.1 version is a natural evolution of 6.x generation with fixes and improvements which didn't make it into 6.0. Plus we listen to community and make some possibly, but convenient for target projects breaking changes.

Some highlights of this new version include:

  • Upgrades to the latest dependencies, but only if they don't break the public API we expose

  • Added Protobuf transformers support (shout out to Christian Tzolov)

  • Migration of Zip extension to respective module in the core project

  • The MessageFilter now emits a WARN log when a request message is dropped making it, technically, not silent as it was before

  • Now gateways and replying handlers don't block forever for sending and receiving operations.

Spring Batch 5.0.2 available now!

Releases | Mahmoud Ben Hassine | May 17, 2023 | ...

I am pleased to announce that Spring Batch 5.0.2 is now available from Maven Central.

This release resolves 25 issues, including bug fixes, enhancements, documentation updates and dependency updates. For more details about the changes, please refer to the change log.

I would like to thank all contributors who had a role in this release!

Feedback

We look forward to your feedback on Github Issues, Github Discussions, Twitter, and StackOverflow.

Spring Batch Home|Source on Github|Reference documentation

Spring for GraphQL 1.2.0 released

Releases | Brian Clozel | May 17, 2023 | ...

I'm pleased to announce that Spring for GraphQL 1.2.0 is now available on Maven Central. This version will ship with Spring Boot 3.1.0 later this week.

This is a new feature release for the Spring Boot 3.1.x generation. If you are still using Spring for GraphQL 1.0.x, please consider upgrading to Spring Boot 3.x as OSS support will end next November. We have also raised the baseline version for GraphQL Java to 20.x and we will align with the new GraphQL Java release policy from now on.

We have worked on the most popular issues from the community.

Pagination Support

This release provides first-class support for pagination, seamlessly adapting Spring Data pagination to the GraphQL Cursor Connection specification, including support for the latest and greatest Scroll API in Spring Data 2023.01. To learn more about the pagination support in Spring GraphQL 1.2, check out the project's reference documentation

Spring for GraphQL 1.1.4 released

Releases | Brian Clozel | May 16, 2023 | ...

I'm pleased to announce that the Spring for GraphQL 1.1.4 maintenance version is now available on Maven Central.

Spring for GraphQL 1.1.4 includes 11 fixes and documentation improvements, including important fixes for Observability support. This version will be shipped with Spring Boot 3.0.7, to be released this Thursday.

How can you help?

If you have general questions, please ask on stackoverflow.com using the spring-graphql tag.

Project Page | GitHub | Issues | Documentation | Stack Overflow

Get the Spring newsletter

Thank you for your interest. Someone will get back to you shortly.

Get ahead

VMware offers training and certification to turbo-charge your progress.

Learn more

Get support

Tanzu Spring Runtime offers support and binaries for OpenJDK™, Spring, and Apache Tomcat® in one simple subscription.

Learn more

Upcoming events

Check out all the upcoming events in the Spring community.

View all